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I CLAIM: 

1 . A method for signing frame transmissions from a broadcast server to a 
client device, comprising: 

retrieving a data block that is scheduled for transmission in the next 

frame; 

selecting a secret key (S„) that is associated with the client device for a 
number (n) of data blocks; 

computing a set of hash keys using the secret key (S„) and a count that is 
associated with time; 

selecting a hash key (S,) that is associated with the data block, wherein 
the hash key corresponds to one of the set of hash keys; 

computing an HMAC value for the next frame using the selected hash 

key (SO; 

periodically signing and transmitting a datum containing the hash key of 
an earlier or initial frame with a digital signature key (K^) ; and 

assembling the next frame such that the data block and the HMAC value 
appear before the hash key in the frame transmission. 

2. The method of claim 1 wherein the datum corresponds to at least one of 
{n, So)}K s and (n, Z>, S&) where b corresponds to a preceding frame number from a 
previous frame transmission. 

3. The method of claim 1, further comprising: selecting the count such that 
the count is associated with an index of the data block. 

4. The method of claim 1, further comprising: selecting the count such that 
the count corresponds to a time stamp associated with an internal clock in the broadcast 
server. 
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5. The method of claim 1, wherein computing the set of hash keys 
corresponds to applying a one-way hashing function to the secret key (S„) for n 
iterations such that S, = HASH(S,+i). 

6. The method of claim 1, wherein computing the HMAC value 
corresponds to a hashed message authentication code, wherein a value (H z ) associated 
with the hashed message authentication code is given as Hj = HMAC(F Z , S,), where F z 
corresponds to the data being signed, S z the key for signing, and i the sequence number 
associated with the data and key. 

7. The method of claim 1 , further comprising: selecting a new secret key as 
the secret key (S /7 ) when the previous secret key has been applied to n data blocks in the 
next frame, 

8. The method of claim 1, wherein periodically signing the datum 
comprises at least one of signing the datum for every frame, and signing the datum over 
an interval that does not correspond to every frame. 

9. The method of claim 1, further comprising: incrementing the count 
before retrieving a data block that is scheduled for transmission in the next frame. 

10. The method of claim 9, wherein incrementing the count corresponds to at 
least one of: incrementing a time step in the broadcast server, incrementing the frame 
number associated with the next frame that is scheduled for transmission, and 
incrementing the block number associated with the next data block in the next frame 
that is scheduled for transmission. 

11. A method for authenticating frame transmissions from a server to a client 
device, comprising: 

retrieving an RSA signed datum from a frame; 
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verifying an RSA signature associated with the RSA signed datum from 

the frame; 

storing a hash key (So) that is associated with the frame when the RSA 
signature is verified; 

retrieving another hash key (S,) and an HMAC value from the frame; 

verifying the other hash key (S,-); 

verifying the HMAC value with the other hash key (S,); 

discarding the frame when at least one of the other hash key (Sz) and the 
HMAC value fail verification; and 

accepting the frame when the other hash key (S,) and the HMAC value 
are successfully verified. 

12. The method of claim 11, further comprising evaluating a count 
associated with the client device, computing a hash key using the count and a secret key 
(S„) that is known by both the server and the client device, wherein the count 
corresponds to at least one of: a time step in the client device, identifying the frame 
number associated with the frame, and identifying the block number that is associated 
with the frame. 

13. The method of claim 1 1 , wherein verifying the other hash key (S,) 
comprises: retrieving a previously stored hash key, retrieving a count in the client 
device, computing an expected hash key from the previously stored hash key and the 
count, and comparing the expected hash key to the other hash key (Si). 

14. The method of claim 13, wherein the count corresponds to at least one 
of: a time step in the client device, identifying the frame number associated with the 
frame, and identifying the block number that is associated with the frame. 

15. The method of claim 11, wherein verifying the HMAC value with the 

other hash key (S/) comprises: computing a value (Hi) that is associated with a hashed 

message authentication code as given by Hi = HMAC(Fi, Si), where F, corresponds to 
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the data being signed, S, the key for signing, and i the sequence number associated with 
the data and key, and comparing the computed value with the retrieved HMAC value 
from the frame. 

16. The method of claim 11, further comprising: storing a verified hash key 
(SI) for verification of further transmission frames after the hash key is accepted. 

17. A broadcast communication system for communicating frame 
transmissions from a server to a client device, comprising: 

a scheduler that is arranged to provide data blocks to the server for 
transmission in a next frame; 

a counter that is arranged to provide a count in the server; 

a hashing function in the server that is arranged to compute hash keys for 
the next frame using the count and a secret key; 

an HMAC function in the server that is arranged to provide an HMAC 
value in response to hash keys associated with the next frame; . 

a broadcast processor in the server that is arranged to receive the hash 
keys, HMAC values, and the data blocks, and organize the next frame for transmission 
such that the data block and the HMAC value appear before the hash key in the frame 
transmission. 

18. The broadcast communication system of claim 17, further comprising: 
a broadcast receiver in the client device that is arranged to receive a 

transmitted frame, wherein the transmitted frame starts with another HMAC value, 
continues with another signed datum {n, S^)}K S followed by another data block, and 
ends with another hash key S,; 

a counter in the client device that is arranged to provide another count; 

a hashing function in the client device that is arranged to compute 
additional hash keys for the frame transmission using the other count, the secret key, 
and previously stored hash keys; 
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a verification function block in the client device that is arranged to verify 
the other hash key (S,-) with the additional hash keys and verify the HMAC value with 
the other hash key (S,) and previous hash keys; 

a means for discarding the frame in the client device when at least one of 
the other hash key (S,-) and the HMAC value fail verification; and 

a means for accepting the frame in the client device when the other hash 
key (S/) and the HMAC value are successfully verified. 

19. The broadcast communication system of claim 18, further comprising: a 
means for recording the other hash key (S,) when the frame is accepted, wherein the 
other hash key (S,) is utilized for verification of subsequently received transmission 
frames. 

20. A system for authenticating frame transmissions in a client device, 
comprising: 

a broadcast receiver that is arranged to receive a transmitted frame, 
wherein the transmitted frame includes an HMAC value and a data block, and ends with 
a hash key S,; 

a counter that is arranged to provide a count that has a time dependence; 

a hashing function that is arranged to compute hash keys for the 
transmitted frame using the count and a secret key; 

a verification function block that is arranged to verify the hash key (S,) 
with the computed hash keys, and also arranged to verify the HMAC value with the 
hash key (S,) and the previously stored hash keys; 

a means for discarding the frame when at least one of the hash key (S,) 
and the HMAC value fail verification; 

a means for accepting the frame when the hash key (S,) and the HMAC 
value are successfully verified; and 
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a means for storing the hash key as a previously stored hash key when 
the frame is accepted such that subsequent frames utilize the stored hash key for 
verification. 
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